Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/H7vhfZtFhJBGVdDeGTsZAEOBNxI.roa
File: H7vhfZtFhJBGVdDeGTsZAEOBNxI.roa (raw, json)
Hash identifier: f9KLSjwW9gwFPffwMN1zAF2mJUozKDoBW/6UJhFzBDo=
Subject key identifier: 1F:BB:E1:7D:9B:45:84:90:46:55:D0:DE:19:3B:19:00:43:81:37:12
Certificate issuer: /CN=07e028f76c79a651df70a993f3deb052d5904f7b
Certificate serial: 0185B9DCB774274A693539DB5D508F9C6F3C
Authority key identifier: 07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/H7vhfZtFhJBGVdDeGTsZAEOBNxI.roa
Signing time: Mon 16 Jan 2023 09:15:27 +0000
ROA not before: Mon 16 Jan 2023 09:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210315
IP address blocks: 91.231.201.0/24 maxlen: 24
91.231.202.0/24 maxlen: 24
91.231.203.0/24 maxlen: 24
91.231.200.0/24 maxlen: 24
195.88.254.0/24 maxlen: 24
195.88.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:dc:b7:74:27:4a:69:35:39:db:5d:50:8f:9c:6f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e028f76c79a651df70a993f3deb052d5904f7b
Validity
Not Before: Jan 16 09:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fbbe17d9b4584904655d0de193b190043813712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:24:4c:83:f3:be:79:aa:e9:c9:af:98:07:
34:e5:a3:3d:b3:4e:6e:b1:18:cb:46:ca:e4:93:53:
ad:36:b8:21:2d:a3:03:bd:f0:88:10:95:76:c7:e7:
b2:75:a5:29:f7:fa:c9:d6:aa:40:6d:3e:66:e6:7c:
40:91:b2:d3:f7:c8:99:88:83:58:86:5e:d3:bf:21:
88:51:98:a0:59:49:b3:5c:f6:10:a5:a5:8b:fc:c9:
7e:4a:e8:72:de:1c:c1:a2:b0:ae:ef:6d:7f:8c:e1:
15:a5:9d:89:e3:4c:f8:6b:47:30:bd:1c:f2:31:15:
69:a5:76:0f:d6:04:0e:88:3e:60:b6:65:c1:0a:26:
6c:eb:56:d6:8b:52:0f:93:49:92:41:6c:7c:6b:c2:
82:70:fb:b9:e8:11:ed:3a:6e:40:c1:f4:2a:56:3e:
c3:c9:f4:a5:04:da:34:97:7a:47:07:b7:c8:04:22:
1d:ec:b5:a8:e6:90:bb:32:1d:41:1f:be:73:11:af:
60:3b:66:a8:21:b1:d0:55:f1:90:d1:d4:59:76:b4:
6f:8f:bb:bb:41:31:11:ba:60:7f:84:4e:31:60:8d:
06:22:49:aa:48:28:e5:38:73:ce:b8:27:2c:c1:f9:
57:e8:2b:0e:fd:09:ea:12:16:41:70:93:f4:cb:93:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:E1:7D:9B:45:84:90:46:55:D0:DE:19:3B:19:00:43:81:37:12
X509v3 Authority Key Identifier:
keyid:07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/H7vhfZtFhJBGVdDeGTsZAEOBNxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.200.0/22
195.88.254.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b2:63:9c:5b:42:a6:1b:c6:9e:d9:94:cd:8c:fc:46:df:47:
27:0f:5d:31:9f:6b:bb:77:1a:a9:cd:52:87:1e:8b:46:9f:42:
d5:92:a8:ae:e9:26:bb:65:b1:67:a6:31:a8:2d:66:3e:25:b4:
a9:ca:ab:ca:d6:81:b3:1d:cb:75:09:50:6a:38:21:f0:28:44:
c0:d5:41:44:6c:5e:95:3c:2c:c6:1a:60:53:cb:29:d5:56:92:
92:8c:4c:4c:86:13:8a:c9:8c:76:73:df:19:82:2b:73:00:02:
df:42:a1:30:f4:f7:f0:cd:0d:06:16:ea:91:6f:fc:5a:4d:eb:
ef:88:b8:8e:8d:7e:74:b9:e1:b8:a0:f3:a2:73:5b:cf:17:5b:
b8:dd:a1:28:25:8f:5c:0f:14:2f:f9:2f:97:36:f1:3e:48:c3:
c0:dd:62:96:62:df:76:dc:bd:98:18:6d:d4:90:32:6e:f2:9c:
c9:30:d4:b6:23:56:48:66:ef:8d:3d:76:df:d5:7d:02:1a:d1:
8d:4d:df:85:7c:8a:b2:9e:45:45:f4:b4:29:31:ad:47:0e:ad:
7b:33:8f:f6:6e:ac:45:e5:6b:fd:65:28:2a:7c:9c:de:dc:ec:
3a:02:68:0e:a0:5f:af:eb:13:c4:33:df:b6:26:3d:2c:93:11:
cc:9e:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 11:30:36 2023 by rpki-client on console-fra.rpki-client.org